11935 matches found
CVE-2024-27428
CVE-2024-27428 is rejected/not used per the Initial Description.
CVE-2024-27419 netrom: Fix data-races around sysctl_net_busy_read
In the Linux kernel, the following vulnerability has been resolved: netrom: Fix data-races around sysctlnetbusyread We need to protect the reader reading the sysctl value because the value can be changed concurrently...
CVE-2024-27419 netrom: Fix data-races around sysctl_net_busy_read
In the Linux kernel, the following vulnerability has been resolved: netrom: Fix data-races around sysctlnetbusyread We need to protect the reader reading the sysctl value because the value can be changed concurrently...
CVE-2024-27419
In the Linux kernel, the following vulnerability has been resolved: netrom: Fix data-races around sysctlnetbusyread We need to protect the reader reading the sysctl value because the value can be changed concurrently...
CVE-2023-41092
The CVE concerns the Secure Device Manager (SDM) firmware for Intel Stratix 10 and Intel Agilex 7 FPGA products. The root cause is an unchecked return value in SDM firmware, affecting firmware versions prior to 23.3. The vulnerability could let an authenticated user trigger a denial-of-service vi...
CVE-2024-35176
REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this...
Intel Stratix 10 和 Intel Agilex 7 FPGAs 安全漏洞
Intel FPGAs Pro Edition Software is a fully supported software development kit for FPGA Field-Programmable Gate Array developers from Intel Corporation. A security vulnerability previously existed in Intel Stratix 10 and Intel Agilex 7 FPGAs version 23.3, which stemmed from an unchecked return...
PT-2024-12918 · Intel · Intel Stratix 10 +1
Name of the Vulnerable Software and Affected Versions: IntelR Stratix 10 and IntelR Agilex 7 FPGAs versions prior to 23.3 Description: The issue is related to an unchecked return value in the SDM firmware, which may allow an authenticated user to potentially enable denial of service via adjacent...
CVE-2023-6324
ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity...
CVE-2023-6324 ThroughTek Kalay SDK error in handling the PSK identity
ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity...
PT-2024-40776 · Libvpx · Libvpx
Name of the Vulnerable Software and Affected Versions: libvpx affected versions not specified Description: The issue is related to a crash caused by a use-of-uninitialized-value error. The crash occurs in the vpx codec peek stream info function, as reported by the OSS-Fuzz tool. Recommendations: ...
CVE-2024-32611
HDF5 Library through 1.14.3 may use an uninitialized value in H5Aattrreleasetable in H5Aint.c...
AZL-40595 CVE-2024-32611 affecting package hdf5 for versions less than 1.14.4.3-1
HDF5 Library through 1.14.3 may use an uninitialized value in H5Aattrreleasetable in H5Aint.c...
DEBIAN-CVE-2024-32611
HDF5 Library through 1.14.3 may use an uninitialized value in H5Aattrreleasetable in H5Aint.c...
AZL-40682 CVE-2024-32611 affecting package hdf5 for versions less than 1.14.4-1
HDF5 Library through 1.14.3 may use an uninitialized value in H5Aattrreleasetable in H5Aint.c...
UBUNTU-CVE-2024-32611
HDF5 Library through 1.14.3 may use an uninitialized value in H5Aattrreleasetable in H5Aint.c...
CVE-2024-32611
HDF5 Library through 1.14.3 may use an uninitialized value in H5Aattrreleasetable in H5Aint.c...
CVE-2024-27280
A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and ungetc methods on a StringIO can read past the end of a string, and a subsequent call to StringIO.gets may return the memory value. 3.0.3 is the main fix...
